How does the Sko 2811 router partially access the Internet and partially not access the Internet, an

1. The broadband network cable or the network cable out of the cat is connected to the WAN port of the router, and the LAN port is connected to the computer.

2. After starting the device, open the browser and enter it in the address bar to enter the wireless router settings interface. (If you can't get in, please look at the nameplate at the bottom of the router or the router instruction manual, the default settings of different models of routers are different.) ）

3. An account and password to log in to the router appear in the settings interface, enter the default account and password admin, or refer to the manual;

4. After successful login, select the interface of the setup wizard, which will automatically pop up by default;

5. After selecting the setup wizard, a window will pop up to explain that you can set the basic parameters of the router through the wizard, and click Next directly;

6. Set up step by step according to the setup wizard, select the Internet mode, usually ADSL users choose the first PPPoE, if you use other network service providers, select the following two according to the actual situation, if you don't know how to choose, directly select the first item to automatically select, convenient for novice operations, click next after selection;

7. Enter the account and password applied for from the network service provider, and go directly to the next step after the input is completed;

8. Set the wifi password, try to make the alphanumeric combination more complicated, and it is not easy to be rubbed off the network.

9. After entering correctly, it will prompt whether to restart the router, select Yes to confirm the restart of the router, and you can access the Internet normally after restarting the router.

Hardware: The environment is too bad, but Cisco's equipment is not a problem in the general bad situation, and it was a very bad situation at that time; Software: Memory is too large, most likely nat table, log in with the privileged command clear ip nat translation * See show process cpu and show process memory to see.

It is impossible for ordinary TP-Link, or Tengda, FAST, and other routers to achieve this function.

Let me solve the problem with you, and explain the principle in detail: first, how to solve the problem you said. You can buy a Cisco or Huawei advanced router, here take Cisco's 2811 model router to explain!

You need a port to access the Internet. One port can't access the Internet, but two computers are required to be able to communicate. If this problem is put on an ordinary router that costs tens of dollars, it is simply a contradictory problem.

Regular routers don't have this feature. Cisco 2811 router, you can do it like this. Write an extended ACL (Access Control List) to restrict computer A from accessing the Internet, and then allow all other traffic from computer A.

In this way, computer A can not access the Internet. However, it can communicate with computer B. The specific way to write is:

access-list 100 deny ip host host

permit ip any any

Sorry, I forgot to write the principle. This problem is a policy security problem on a router, which can be solved by writing an ACL policy, and if it is put on a switch, it is a communication between VLANs. SVI ports or single-arm routing must be enabled.

ps: The question you mentioned is often raised by leaders in the company. In order to restrict the Internet access of certain employees, it is necessary to ensure that this employee can communicate with other employees normally.

Is the router set up? If the router is set up, it should be able to connect to the Internet, and the LAN port of the switch should be connected to the WLAN port of the router.

Finish. If you only access the internal network to the external network, you need to configure a few configurations.

Configure an ACL for the interface over the internal and external networks, enable the interface, enable the interface, configure an ACL for No Shutdown, and configure NAT for the ACL.

Finally, write a to route. ip route

Not much of a problem.

The figure below is not clear, please refer to.

If DHCP is enabled, change dns-server to dns-server. If there is no DHCP service, every.

Back to the machine.

A: DNS is set to.

Do not write the interface address for static mapping, and replace it with a public network IP address

Add the route on the left.

ip route fa0/1

Add the route on the right.

ip route fa0/0

You can control the mask for the specific network segment size).

In short, if you want to access an IP route, you must have an entry for that address in the route table and query the route table show ip route

Change the number 1 in the third number of the LAN port of one of the routes to 2.

The left and right sides of the route are written to the peer.

All you need to do is buy an additional one. HWIC-1FE or HWIC-2FE or HWIC-1GE

It's just not cheap.

If you want a cheap one, go buy NM-1FE (this is the old specification, and the second-hand ** is also cheap).

**Each company** is different, you call ** to ask if there is a fiber optic interface. If hwic-1ge-sfp** is still the same, it would be better for you to ask for xd yourself

The expansion process only needs to turn off the power, plug in the module, and reboot it.

For example, 2FE was originally displayed

When you plug in a HWIC-1FE.

After running show ver, 3fe is displayed

If you think my answer is good, please let me earn some points, thanks!

Ask the dealer if this is scalable or not. 2811 also has expansion cards and non-expansion cards. In fact, two Ethernet ports in the company are enough.

One DMZ, one LAN. The internal VLAN is handed over to the Layer 3 switch.

Refer to it inside, if it's good, remember to give points!

1. First check the router settings, select the corresponding PPPoE dial-up Internet access or other Internet access methods, and fill in the corresponding account and password, many routers can see the WAN port connection status, if the dial-up is successful, the router status can be viewed;

2. If the WAN port dial-up is normal, then check the RAN port settings of the router to see whether the LAN port IP address and the PC are in the same network segment, if not in the same network segment, the PC cannot access the Internet through the router;

3. If the second step is confirmed, you can set up firewalls and wireless.